Privacy policy

• Account details you provide directly — name, email, role/persona, organization, phone.
• Learning activity — enrolments, lesson progress, quiz attempts, assignment submissions, certificate issuance.
• Usage analytics — pages visited, referring URL, device type, screen size, session duration.
• Uploaded files — assignment attachments, logos, questionnaire responses — stored in MongoDB GridFS.
• Communication — enquiries, partner applications, vendor registrations, infrastructure questionnaires.

We use two categories of cookies and browser storage:

• Strictly necessary — session tokens (student, faculty, admin, employee) stored in localStorage. Required to keep you signed in. Cannot be disabled.
• Analytics (optional) — PostHog uses cookies to understand which content is helpful. These load only after you click Accept all in our cookie banner.

You can change your choice at any time by clearing site data in your browser — the banner will reappear on the next visit.

• To provide and improve the LMS learning experience.
• To issue certificates and verify them publicly.
• To route faculty grading and administrative notifications.
• To send transactional email via Resend (vendor approvals, submissions, certificates).
• To measure engagement in aggregate (never sold to third parties).

• Resend — transactional email delivery.
• PostHog — product analytics (only with your consent).
• MongoDB Atlas / GridFS — encrypted-at-rest data + file storage.
• Emergent LLM Gateway — AI Study Buddy responses (only with your explicit action).
• Google & LinkedIn OAuth — for optional social sign-in.

Under DPDP Act 2023 & GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Withdraw consent to non-essential cookies at any time.
• Complain to India's Data Protection Board.

To exercise any right, email us atprivacy@techcatalyst.world. We'll respond within 30 days.

We retain student learning records for as long as your account is active plus 24 months after account closure (needed to reissue certificates on request). Analytics data is aggregated after 90 days and cannot be attributed to an individual.

Grievance officer:privacy@techcatalyst.world